From the course: CompTIA Cybersecurity Analyst+ (CySA+) (CS0-003) Cert Prep: 1 Security Operations

Unlock the full course today

Join today to access over 23,000 courses taught by industry experts.

Social engineering

Social engineering

- [Instructor] Digital threats aren't the only issue facing information security professionals seeking to protect their organizations. Some of the most dangerous risks come from the human threat of social engineering. These are also some of the hardest threats to defend against. Social engineering attacks use psychological tricks to manipulate people into performing an action or divulging sensitive information that undermines the organization's security. For example, an attacker posing as a help desk technician might use social engineering to trick a user into revealing their password over the telephone. Social engineering attacks are the online version of running a con. There are six main reasons that social engineering attacks are successful. These include authority, intimidation, consensus, scarcity, urgency, and familiarity. Let's dig into each of these a little more. Psychological experiments have shown consistently…

Contents